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REMARKS 

Claims 1-22 are pending in the application. 

In the Office Action, the Examiner rejected claims 1-7, 9-15 and 17-21 under 35 
U.S.C. §1 03(a) as being unpatentable over U.S. Patent Number 6,594,746 to Rabeler in 
view of U.S. Patent Number 3,803,559 to Bandoo et al . 

Claims 8, 1 6, and 22 were rejected under 35 U.S.C. §1 03(a) as being unpatentable 
over Rabeler in view of Bandoo etal. in view of Oppenheimer (David L. Oppenheimeretal., 
"Performance Signatures: A Mechanism for Intrusion Detection"). 

In view of the arguments that follow, Applicants respectfully traverse the Examiner's 
rejection of claims 1-22. 

Rejection Under 35 U.S.C. § 103(a) 

The Examiner rejected claims 1-7, 9-15, 17 and 21 under 35 U.S.C. §1 03(a) as 
being unpatentable over Rabeler in view of Bandoo et al . The rejection is respectfully 
traversed. 

The Examiner alleged that Rabeler discloses a monitor flag for indicating that a 
specified address space is accessed by referencing (col. 3, lines 66 to col. 4, line 2; Fig. 6, 
reference 71; and column 5, lines 44-45); and judging means forjudging whether or not an 
access is carried out within the address range set during execution of software by 
referencing Figure 3 and col. 4, lines 47-65. 
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Applicants respectfully submit that neither Rabeler nor Bandoo , taken singly or in 
combination (assuming these teachings may be combined, which Applicant does not 
admit), disclose or teach the claim limitations. Among other things, the references do not 
teach "a monitor flag for setting a flag indicating that a specified address space is 
accessed;" and "judging means forjudging whether or not an access is carried out within 
the address range thus set during execution of a software," as recited in claim 2. 

Rabeler discloses a chip card for a plurality of applications, where a mode bit is set 
to separate a user program from another user program or data used in the programs. By 
separating the user programs, a mode bit is used to determine whether the microprocessor 
operates in a system mode or in a user mode. When the value of the mode bit indicates 
the system mode, two us segment are interconnected to have access to four registers. 
When the value of the mode bit indicates user mode, the two segments are disconnected 
allowing no access to the four registers. The transition from user mode to the system mode 
is made under the control of a special jump instruction where the mode bit is switches. The 
mode bit controls the access of the registers and does not warn if address space is 
accessed. Therefore, the switching of the mode bit in order to allow or not allow access to 
the registers of Rabeler is not analogous to "a monitor flag" that sets a "flag indicating that a 
specified address space is accessed." 

Rabeler further discloses a comparator that compares an address limit with parts of 
an address on a connection that leads to a blocking unit and the comparator. The 
comparator is connected to an output of a register to a bus and is accessible only in a 
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system mode, and can be loaded with a value for an address limit in the system mode. If 
the address is situated within the address limit, the comparator enables the blocking unit 
and the address is applied to a memory and access to part of a segment associated with a 
relevant user program is then inhibited in a user mode. The address limits are compared in 
order to determine the operation of the microprocessor in either system mode or user 
mode. Rabeler's comparator simply compares an address limit in order to allow access in 
either system mode or user mode. The comparator is not analogous to "judging whether or 
not an access is carried out within the address range thus set during execution of a 
software." 

Bandoo etal. do not make up for the deficiencies of Rabeler . Bandoo etal. disclose 
memory protection function for a plurality of registers stored in addresses. The protection 
function is provided for protect-releasing two areas at the same time which are used by an 
application program, one area is released from the protection concerning only a reading, 
writing, and executing functions, and the other area is released from a reading and writing 
function in order to prevent execution of a wrong program between the two released areas. 
The protection function allows a special jump instruction that allows releasing the protection 
with a special instruction is execution. There is nothing in Bandoo et al. that disclose "a 
monitor flag for setting a flag indicating that a specified address space is accessed;" and 
"judging whether or not an access is carried out within the address range thus set during 
execution of a software." 
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Applicants respectfully submit that neither Rabeler nor Bandoo disclose or teach 
claim 2, and the rejection of claim 2 should be withdrawn. Claim 18, which is analogous to 
claim 2, is distinguishable over the references and is allowable for at least the same 
reasons give with regards to claim 2. Dependent claims 3-8 and 10-16, and 19-22 are 
allowable for at least the same reasons with regards to the respective base claims 2 and 
18. 

Applicant respectfully submit that neither Rabeler nor Bandoo disclose or teach 
"judging means forjudging whether or not an access is carried out within the address range 
thus set during execution of a software," as recited in claim 1 . 

Again, Rabeler discloses a comparator that compares an address limit with parts of 
an address on a connection that leads to a blocking unit and the comparator. If the 
address is situated within the address limit, the comparator enables the blocking unit and 
the address is applied to a memory and access to part of a segment associated with a 
relevant user program is then inhibited in a user mode. Moreover, Rabeler's comparator 
simply compares an address limit in order to allow access in either system mode or user 
mode. The comparator is not analogous to "judging whether or not an access is carried out 
within the address range thus set during execution of a software." 

Applicants respectfully submit neither Rabeler nor Bandoo disclose orteach claim 1 , 
and the rejection of claim 1 should be withdrawn. Claim 1 7, which is analogous to claim 1 , 
is distinguishable over the references and is allowable for at least the same reasons give 
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with regards to claim 1 . Dependent claim 9 is allowable for at least the same reasons with 
regards to respective base claim 1 . 



All objections and rejections raised in the Office Action having been addressed. In 
view of the foregoing remarks, Applicants respectfully request the reconsideration and 
reexamination of this application and the timely allowance of the pending claims. Should 
there be any outstanding matters that need to be resolved in the present application, the 
Examiner is respectfully requested to contact Demetra R. Smith-Stewart (Reg. No. 47,354), 
to conduct an interview in an effort to expedite prosecution in connection with the present 
application. 

If necessary, the Commissioner is hereby authorized in this, concurrent, and future 
replies, to charge payment or credit any overpayment to Deposit Account No. 02-2448 for 
any additional fees required under 37 C.F.R. §§ 1 .1 6 or 1 . 1 7; particularly, extension of time 
fees. 



Conclusion 



Respectfully submitted, 




By: 



Charles Gorenstein 
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